CVE-2007-2931

CVE-2007-2931 describes a heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, 7.5 and Windows Live Messenger 8.0, triggered during processing of webcam/video chat sessions. The vulnerability allows user-assisted remote code execution if a user accepts a specially crafted video/webcam ...

CVE-2007-2931

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...

CVE-2007-4515

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...

iDefense Security Advisory 08.30.07: Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities

Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities iDefense Security Advisory 08.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 30, 2007 I. BACKGROUND Yahoo! Messenger is a instant messaging application that allows users to chat online, share...

Yahoo Messenger ActiveX buffer overflow

Buffer overflows in fvCom and info methods of YVerInfo.GetInfo.1...

KLA10397 ACE vulnerability in MSN & Live

A buffer overflow was found in Microsoft Live. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Microsoft-MSN-Messenger Windows-Live-Messenger CVE list...

Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit

No description provided by source. Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger...

Yahoo! Messenger < 8.1.0.419 YVerInfo ActiveX Buffer Overflow

Binary data 4199.prm...

MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit

No description provided by source. MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit thanks ole andre again, His ospy is perfect. 1.compile the dll. 2.inject the dll to msn messenger 7.0.777.0 's process. 3. choose "send my webcam" to a contact id who is online using 7.x 8.0?...

Yahoo! Messenger YVerInfo ActiveX Buffer Overflows

The remote host contains the 'YVerInfo' ActiveX control, distributed as part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger. The version of this control installed on the remote host reportedly contains buffer overflows involving its 'fvCom' and 'info'...

Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit

Exploit for unknown platform in category dos / poc ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2...

Yahoo! Messenger 8.1 - File Transfer Denial of Service

Yahoo! Messenger 8.1 - File Transfer Denial of Service source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing...

Yahoo! Messenger 8.1.0.413 - webcam Remote Crash

Yahoo! Messenger 8.1.0.413 - webcam Remote Crash Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messeng...

MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit =========================================================== thanks ole andre again, His ospy is perfect. 1.compile the dll...

Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash

Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messenger 8.1.0.413 's process. 4 . the otherside's yaho...

Yahoo! Messenger 8.1 - File Transfer Denial of Service

source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing denial-of-service conditions. NOTE: This issue is...

Microsoft MSN Messenger 7.x/8.0? - Video Remote Heap Overflow

MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit thanks ole andre again, His ospy is perfect. 1.compile the dll. 2.inject the dll to msn messenger 7.0.777.0 's process. 3. choose "send my webcam" to a contact id who is online using 7.x 8.0?. 4.when the otherside accept the invatation , t...

Windows Live Messenger Version Detection (deprecated)

Binary data 4196.prm...

Microsoft MSN Messenger Video Conversation Buffer Overflow Vulnerability

Description Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attemp...

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow source: https://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue...